Re: how to NOT use SASL

2010/5/11 Philip Guenther <[email protected]>:
> On Tue, 11 May 2010, Frank Van Damme wrote:
>> Now this is something I don't understand. TSL shouldn't require the use
>> of sasl, logically speaking, yet why am I getting this output?
>>
>> frvdamme@osc1:~$ ldapsearch =C2=A0-w dd -D
>> 'cn=3Dadmin,dc=3Dotec,dc=3Dvub,dc=3Dac,dc=3Dbe' '(cn=3Dadmin)' =C2=A0-H
>> ldap://localhost -x
>
> As a side-note, the above command-line is non-portable as it depends on a
> GNU-libc extension to the behavior of getopt() to parse option arguments
> after positional arguments. =C2=A0(That behavior is a violation of the PO=
SIX
> standard.) =C2=A0The portable way to write that is to put the positional
> argument, the search filter in this case, after all of the option
> arguments, ala:
>
> ldapsearch =C2=A0-w dd -D 'cn=3Dadmin,dc=3Dotec,dc=3Dvub,dc=3Dac,dc=3Dbe'=
 \
> =C2=A0 =C2=A0 =C2=A0 =C2=A0-H ldap://localhost -x '(cn=3Dadmin)'
>
> That's not related to your issue, but you may bump into it later and may
> confuse others trying to reproduce your problem.

Ok, I'll keep that in mind next time I post anything like that to a
mailing list (I worked with non-GNU's but usually I indeed don't pay
much attention to it when on Linux).

> It's not actually doing SASL, but rather is doing a simple bind (see the
> "SIMPLE" there?). =C2=A0ldap_sasl_bind() is the supported libldap entry p=
oint
> for *all* authentication, SASL, SIMPLE, or otherwise. =C2=A0The old libra=
ry
> entry points ldap_simple_bind(), ldap_bind(), and similar were deprecated
> at some point, largly because they didn't support passing controls or
> returning server creds, IIRC.

Ah, ok. That declares it nicely. Thank you very much.

--=20
Frank Van Damme
A: Because it destroys the flow of the conversation.
Q: Why is it bad?
A: No, it's bad.
Q: Should I top post in replies to mailing lists or on Usenet?